web-misc.rules

This is the snapshot of Snot Latest Rules

# Autogenerated skeleton rules file.  Do NOT edit by hand
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-MISC Apache auth_ldap_log_reason format string attempt"; sid:13308; gid:3; rev:1; classtype:attempted-user; reference:cve,2006-0150; reference:bugtraq,16177; metadata: engine shared, soid 3|13308;)
alert tcp $HOME_NET any <> $EXTERNAL_NET $HTTP_PORTS (msg:"WEB-MISC Microsoft IIS HTMLEncode uhwtfms Unicode string buffer overflow"; sid:13922; gid:3; rev:2; classtype:web-application-attack; reference:cve,2008-0075; reference:url,www.microsoft.com/technet/security/bulletin/ms08-006.mspx; metadata: engine shared, soid 3|13922, service http, policy balanced-ips drop, policy security-ips drop;)
alert tcp $HOME_NET any <> $EXTERNAL_NET $HTTP_PORTS (msg:"WEB-MISC Microsoft IIS HTMLEncode Unicode string buffer overflow"; sid:13476; gid:3; rev:1; classtype:web-application-attack; reference:cve,2008-0075; reference:url,www.microsoft.com/technet/security/bulletin/ms08-006.mspx; metadata: engine shared, soid 3|13476;)